Config mirrors (from host koopa)

Directories are named to match live podman container names where possible.

Directory	Live container	Image (typical)
`taler-hacktivism/`	`taler-hacktivism`	`taler-hacktivism-live:landing`
`taler-hacktivism-bank/`	`taler-hacktivism-bank`	`taler-hacktivism-banking:live`
`taler-exchange/`	conf inside exchange container	(see exchange-ansible)
`taler-exchange-ansible/`	`taler-hacktivism-exchange-ansible`	`taler-hacktivism-exchange-ansible:landing`
`bank-landing/` `exchange-landing/` `merchant-landing/`	nginx landing snippets	ports 9013–9015
`koopa-*` apps	`koopa-castopod`, `koopa-bonfire`, …	compose mirrors
`tops/`	`koopa-tops-ng1` … `ng3`	`nginx:1.27-alpine`
`caddy/` `firewalld/` `systemd/`	host services
`tor/`	`koopa-tor-relay` (podman host net)	`localhost/koopa-tor-relay:latest`
`paivana/`	`koopa-paivana` (+ upstream)	`localhost/koopa-paivana:latest`

Authoritative running inventory: host/overview/LIVE.md.

Secrets never live here — SECRETS.md / koopa-admin-secrets.